Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: ocUl01rT/YPW5Sk8CDdBewX2i7KR7dBSOIv+1qTUJBI=
Subject key identifier: A6:DF:C6:65:40:65:EA:F9:17:5C:D7:5A:B4:CE:32:08:2D:5E:52:41
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 019CAE359FE40D5DB3F5B740D61F7799C232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0E89
Signing time: Mon 02 Mar 2026 11:01:15 +0000
Manifest this update: Mon 02 Mar 2026 11:01:15 +0000
Manifest next update: Tue 03 Mar 2026 11:01:15 +0000
Files and hashes: 1: OMDj7S7H5Znb54o4B4mYw4OI1xA.roa (hash: QwhdgA5D4IFqcLTQvjEb7OBJC7e4ri/WagCnJPfPU5Q=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: oUHhjvT9SXCMbD3H+7YPZqGRcNXGgh/O0qPirETe9Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:9f:e4:0d:5d:b3:f5:b7:40:d6:1f:77:99:c2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Mar 2 11:01:15 2026 GMT
Not After : Mar 3 11:01:15 2026 GMT
Subject: CN=a6dfc6654065eaf9175cd75ab4ce32082d5e5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:d2:c6:c8:b9:2b:d8:91:3e:54:8e:17:1e:
2f:31:33:f6:72:10:bb:ff:b5:92:e4:07:06:a6:ec:
29:52:1c:69:89:dd:83:33:eb:6e:20:7c:62:99:63:
73:e6:e8:c5:b0:b6:f9:3c:fd:7c:d2:6c:a6:94:cd:
68:d3:36:b6:4a:40:68:d6:2a:a7:ab:1c:b3:34:71:
8d:23:a4:1b:5d:cf:ca:46:bc:ff:2f:3a:0f:b9:73:
9e:81:05:89:d2:81:c2:9e:68:c9:45:8f:c5:ba:cf:
12:3a:53:86:ca:ac:66:24:a9:a9:ab:eb:89:0f:74:
16:e9:28:75:66:a3:48:2c:0c:6f:4c:4b:61:79:0f:
e2:f5:d3:b8:f4:0e:05:de:b6:45:25:fd:50:37:d3:
95:a8:9a:96:29:34:4c:60:dc:b0:4a:89:60:7d:11:
c6:10:1b:ca:a7:b6:bc:e4:79:a3:c8:5c:05:ee:8c:
f3:e6:43:76:fe:33:67:37:3f:e4:59:d0:bd:69:a1:
66:c4:0c:e2:be:a2:67:ed:cc:35:8b:a4:fb:e5:ac:
1e:2c:f6:c2:ed:60:35:f3:b8:cf:9e:6b:a7:a2:4e:
f4:1b:93:72:40:68:52:cd:f7:c6:f9:0a:b0:5b:9c:
dc:a5:06:7f:10:23:93:98:e6:42:3f:c0:c8:13:c2:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DF:C6:65:40:65:EA:F9:17:5C:D7:5A:B4:CE:32:08:2D:5E:52:41
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ba:36:23:01:a0:5d:a9:b6:84:bc:bf:56:7a:d8:48:0c:17:
ae:61:78:e4:3d:87:47:95:e8:dd:28:43:7e:97:21:53:7a:40:
25:b8:08:3a:43:39:6e:a4:9b:c8:1f:fe:9f:f9:25:3e:e9:fd:
4b:a8:57:1f:6f:96:bd:4e:13:8d:d7:db:52:9f:67:df:1d:d3:
62:49:13:9a:dd:02:e4:d4:31:52:37:46:33:fa:22:06:4b:ae:
0e:55:5a:e5:d1:bc:ee:2c:76:8c:e2:c1:f5:f2:d7:26:88:3c:
64:3a:8b:a2:72:8a:8b:9c:c2:ee:5d:67:83:f2:7f:48:b6:ff:
bf:02:f2:84:6e:9e:c9:dd:03:20:88:ef:c7:87:79:3a:d0:7a:
c4:82:c4:bb:2f:26:48:0c:0a:24:a7:3b:6d:38:e5:f7:b0:6e:
8a:80:f1:3a:4e:d5:ac:c7:bb:ed:ff:75:3a:fc:6a:9c:4c:d0:
7f:66:13:e2:4c:e5:ac:03:9b:dd:6b:2e:22:ac:ca:8a:9f:38:
58:1d:1e:94:ca:03:b3:f8:b3:c6:e9:14:6b:62:06:84:cc:c7:
7a:68:82:0c:8b:b4:ab:14:3a:2a:4c:8b:25:87:2c:e1:1a:98:
45:73:02:45:a8:9e:73:4f:50:ca:54:49:31:5a:63:ac:df:69:
b9:02:cb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNZ/kDV2z9bdA1h93mcIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDg1MTBhZTQxYWI4NTY3NzlhYzE4NmYwNDcwOTkxZjVh
MmE1MGYwHhcNMjYwMzAyMTEwMTE1WhcNMjYwMzAzMTEwMTE1WjAzMTEwLwYDVQQD
EyhhNmRmYzY2NTQwNjVlYWY5MTc1Y2Q3NWFiNGNlMzIwODJkNWU1MjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdXSxsi5K9iRPlSOFx4vMTP2chC7
/7WS5AcGpuwpUhxpid2DM+tuIHximWNz5ujFsLb5PP180mymlM1o0za2SkBo1iqn
qxyzNHGNI6QbXc/KRrz/LzoPuXOegQWJ0oHCnmjJRY/Fus8SOlOGyqxmJKmpq+uJ
D3QW6Sh1ZqNILAxvTEtheQ/i9dO49A4F3rZFJf1QN9OVqJqWKTRMYNywSolgfRHG
EBvKp7a85HmjyFwF7ozz5kN2/jNnNz/kWdC9aaFmxAzivqJn7cw1i6T75aweLPbC
7WA187jPnmunok70G5NyQGhSzffG+QqwW5zcpQZ/ECOTmOZCP8DIE8KOcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbfxmVAZer5F1zXWrTOMggtXlJBMB8GA1UdIwQY
MBaAFLlIUQrkGrhWd5rBhvBHCZH1oqUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2Qt
ODNhMjVhOTRjNzdmLzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YWEzMDMtNTlmNy00Zjk5LTkwN2QtODNhMjVhOTRjNzdm
LzEvdVVoUkN1UWF1RlozbXNHRzhFY0prZldpcFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7o2IwGg
Xam2hLy/VnrYSAwXrmF45D2HR5Xo3ShDfpchU3pAJbgIOkM5bqSbyB/+n/klPun9
S6hXH2+WvU4TjdfbUp9n3x3TYkkTmt0C5NQxUjdGM/oiBkuuDlVa5dG87ix2jOLB
9fLXJog8ZDqLonKKi5zC7l1ng/J/SLb/vwLyhG6eyd0DIIjvx4d5OtB6xILEuy8m
SAwKJKc7bTjl97BuioDxOk7VrMe77f91OvxqnEzQf2YT4kzlrAOb3WsuIqzKip84
WB0elMoDs/izxukUa2IGhMzHemiCDIu0qxQ6KkyLJYcs4RqYRXMCRaiec09QylRJ
MVpjrN9puQLL8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:21 2026 by rpki-client